Facebook is not the problem. Lax privacy rules are

Last week, Facebook said it was simplifying and centralizing privacy settings, making it easier for its more than two billion users to change how much personal information they share. That was an important and necessary change, but what we have learned about the data collection practices of social media firms, advertisers, political campaigns, online publishers and other groups suggests that company-specific changes like Facebook’s will be insufficient. What is needed is for Congress to adopt rigorous and comprehensive privacy laws.